0555619e529241bac4158ae54abb86817c58108bde6a893f080c87e520cb22c6

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Autocom+Delphi+2014+Activator,5128699323.html
Size 39KB
Sample261104-w28staed42
SHA256 0555619e529241bac4158ae54abb86817c58108bde6a893f080c87e520cb22c6
MD5 c4b0731a794cd03a84f0d1dd108c2ba4
SHA1 0b460f3f3b2149f239c44389adc87bc4ac1d99d4
SHA512 d4067c4650be3e2acbf9f17d3e70658a87378045c646fe0e8b429b654cd130063693769f699e2ca69c08f10f08f0cd58dc76163e3846d302d7d0a51d4797985c
SSDEEP 384:GQy9+4LIZecuHL9uHymESwejc6V0v2Mt1/qcHfmieGeT9MYrxkq:G5E4LKecuHaymtjciG31LReGe+Yrxf
TLSH
T19203B81AB8C18C320277C2E69E52BF2EED61821B921A084836FE4757DFF2D554D5358F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5960	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{EF0DED5E-47A1-4FFC-8F2A-A3CD0C88C94F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2900 wrote to memory of 3556	2900	msedge.exe	90
PID 2900 wrote to memory of 3140	2900	msedge.exe	91
PID 2900 wrote to memory of 5960	2900	msedge.exe	92
PID 2900 wrote to memory of 3140	2900	msedge.exe	91
PID 2900 wrote to memory of 3140	2900	msedge.exe	91
PID 2900 wrote to memory of 4408	2900	msedge.exe	93
PID 2900 wrote to memory of 4408	2900	msedge.exe	93
PID 2900 wrote to memory of 4580	2900	msedge.exe	96
PID 2900 wrote to memory of 4620	2900	msedge.exe	95
PID 2900 wrote to memory of 4620	2900	msedge.exe	95
PID 2900 wrote to memory of 4620	2900	msedge.exe	95
PID 2900 wrote to memory of 4580	2900	msedge.exe	96
PID 2900 wrote to memory of 4580	2900	msedge.exe	96
PID 2900 wrote to memory of 4512	2900	msedge.exe	97
PID 2900 wrote to memory of 4512	2900	msedge.exe	97
PID 2900 wrote to memory of 4512	2900	msedge.exe	97
PID 2900 wrote to memory of 6052	2900	msedge.exe	98
PID 2900 wrote to memory of 6052	2900	msedge.exe	98
PID 2900 wrote to memory of 6052	2900	msedge.exe	98
PID 2900 wrote to memory of 4796	2900	msedge.exe	100
PID 2900 wrote to memory of 4608	2900	msedge.exe	101
PID 2900 wrote to memory of 4796	2900	msedge.exe	100
PID 2900 wrote to memory of 4608	2900	msedge.exe	101
PID 2900 wrote to memory of 3684	2900	msedge.exe	103
PID 2900 wrote to memory of 3400	2900	msedge.exe	108
PID 2900 wrote to memory of 5124	2900	msedge.exe	109
PID 2900 wrote to memory of 1584	2900	msedge.exe	110
PID 2900 wrote to memory of 5388	2900	msedge.exe	111
PID 2900 wrote to memory of 5388	2900	msedge.exe	111
PID 2900 wrote to memory of 2640	2900	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Autocom+Delphi+2014+Activator,5128699323.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffe7e03c188,0x7ffe7e03c194,0x7ffe7e03c1a0
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,7328142946501186456,6974327600509334326,262144 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,15027593283586097599,13680275858574860944,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,4089198246739221174,11997239444801585784,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:13
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,1944035447190057062,17184784522651733980,2097152 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,3628412071891540213,11437240924940257200,2097152 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,10621868177372156958,3849353798713042735,2097152 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:9
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,10657844086980961435,13757318109211964751,2097152 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,14749097617753075655,15649003980421377018,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,16959319959396632788,6366086540504085007,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:14
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,13192560699340242218,1937683806231577569,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,13192560699340242218,1937683806231577569,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,3315169276913579716,16042714568554606916,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:14
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,12591789421729448153,16969403350751682039,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3852,i,11453109311806182435,5654121430712472997,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,1374980959966026290,3751263899656345335,524288 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6796,i,8744681612186012488,13523540137990119542,262144 --field-trial-handle=2332,i,18407036006921704578,8835841654722099357,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

133c1fb1-facd-4885-a310-0405f1a4b72e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\133c1fb1-facd-4885-a310-0405f1a4b72e.tmp
Size 38KB
SHA256 b76ac0798e235c7f82d88119954961a0a40120d814e6ce1026a05ffb17763f7b
MD5 8ef15ee4860b8db1251d2373fdafaf4e
SHA1 7d990cf8394ab1b0301446ac6c7ea38469786b68
SHA512 79fff989ed36f6adef6bcb72fc47c244262b4e60bfc1a27a0df813e86db7711e3c3a9925a5edada547193c6051fb3c9fc9901f3f9120e6695b1e881802b37b61
SSDEEP 768:U/UxvxjgC+CZ3ppK3OV4t34E1h3Yogkl5akl8pbHW0AWiDSHvP0Vv:BZj3+I3s1h3Yog05akl4bHW0AxSCv
TLSH
T13003C035EC65AE738AE6E284761AA307FFF4946356C45A9449DCAF0D028B3BD030BD53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c3e0090-ab99-4b50-98bc-0485ca49e87d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c3e0090-ab99-4b50-98bc-0485ca49e87d.tmp
Size 34KB
SHA256 071f9c8bf962bbe0f640b3641b882720b42277534567d260aa1ceb4d8142402d
MD5 6a225fb37fdc88c0b4aea1a6fd2b21d5
SHA1 5aaf8728a24447414a345b5ed0afc16317326fc4
SHA512 6e4d1b566fb93230715de9dfdae7719bcdc873bd12da6699cd96c852d00479982ab44812df034527446de7b8f205b0813fc498be752c9f47e05cd1846cf603e4
SSDEEP 768:Zm3Q7K3OV4t34V1h3Yogkl5akl8pbHW0AWDDE75EhLW:Zm3G1h3Yog05akl4bHW0AKk+q
TLSH
T1D4F2AF71ECA59E774AD2E244B21A3257FEF4D0279AD84A84D4CD9F0D018B6AE034FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5ce8f32-6a11-4276-b87b-7fa895958403.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\d5ce8f32-6a11-4276-b87b-7fa895958403.tmp
Size 105KB
SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
MD5 48ffe64f366166704c21161efe0b504f
SHA1 a6403dde2edbd6b341ad301811396e7d3aea1af5
SHA512 ad78beb367abbdbb0a58e28566138180a03a9826f30f2dc412a05e0ca179742f6e123202adf44a50da1f4b71145ff6cb0cde66f326d4e9b116ce56b2281ea253
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

2b579fbf-c4f5-4234-b594-44c481df3a90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b579fbf-c4f5-4234-b594-44c481df3a90.tmp
Size 23KB
SHA256 b409dde7ad629c83e7d8abb3c174b421523306e4ec81c4f06c790d321183f449
MD5 a063e7ec52523aa6a4035ec7a4cf5a1a
SHA1 8f0f566b3ed7c54069a910ff10ded1ef1b9301cd
SHA512 33d7eddb3b5b98f32f59092c4c6ab6291e9de34175779238015a657fff5297173118d6750eeae3dfd0f1b29137fdc099b7055b458ed471f08e4e520847aedc44
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLgroKrB:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0VV
TLSH
T1F1B2FB2B604DCB7E4FC01A9D9C196FD76DA802CB96588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8376e8be-9482-467b-9bc6-af9b0abdf4b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8376e8be-9482-467b-9bc6-af9b0abdf4b8.tmp
Size 11KB
SHA256 dcf563d4fc508d0971d25024fc839372b5c577db92a58e13da2004282e701a8e
MD5 f796814a1b0fa4754a19ddc96f00ece2
SHA1 53414775769adabdfb63838695ac0ff4011d3359
SHA512 fdee299ce96c762e6333c61a360783af7ebc41a87547b27cd9f85866d39311f65d62cc5846d2f97ceac407c7ce19598a53a6f4a31c40ba6109494da960c5fc64
SSDEEP 192:sxRMguRKb0/f2scqmB5zoA8p4B/g6+WNIYd6roY7GWhQcIgDIJ:sxRMgu+0/f2scHBEI/5I5BQ
TLSH
T10E42A615AD68AD3B9CCBD20DFB557F53E2FA5032A1951F44A6FC8A1C04EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9917f1ab-1e3b-4818-9108-5a69ee7131ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9917f1ab-1e3b-4818-9108-5a69ee7131ed.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b0500beb69b14fe14f5a11e92792ba6e3443ee2a8537c62f4e53296fbce6644c
MD5 d3792b94e28783a71d8f68f2c9630541
SHA1 841238b9c2e2e1d5345f7cceec31b7b88df46f8d
SHA512 d6fefca3a2a40acdcf3cf6c53f0fb5872c1f0eb83d883a934f77e626d8f286feb9280be76e19658c8a16f0607bab8f85776dee43d594273632f86a7b9f5e7e00
TLSH
T14F61C6009238C97BEB98BAB944CC3D9A3A7DB08CBEF30F106347D1B65A16F1DA040858
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2684d9d4dcae71ef204be4a85384cc1162f5a118e6c4380c3486a15b3fab3ac0
MD5 705ec62a5c8e7bd5176c0a1c91e474dc
SHA1 ffef3de4b1c5849fdd756a65bb7514e8e749471a
SHA512 5824a682efde087a3f96799789eb1ce7628352d1c96d56a0bdc472d71165ac5821bcd5223d9bca03a8d82a9a7b24f909fed4d939bf5fbab49b53262b2fbca4fd
TLSH
T16F61C6009228C97BEB98B9B984CC3D9A3A79B08CBEF30F106347D1B25A16F1DA040858
MD5 SHA1 SHA512 TLSH

Submit Download

08bd67ca-90c1-450a-a37f-e7225489467d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\08bd67ca-90c1-450a-a37f-e7225489467d.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

548c70fc-906a-4ea1-b58a-e8bfc51a4656.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\548c70fc-906a-4ea1-b58a-e8bfc51a4656.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9f71277a3999de57c10a83ce0aa29ff296d08924258bf077a396bc5305d9fb00
MD5 78632da25899f936af6691d56f7a7ef1
SHA1 cc67b6b099ce636d862a7b272b7d58fa804fc151
SHA512 6d1c9100317f23ff39cef43af0a60764925e26f5a4db0363b1a3678e73770419823c64327f465bb27365e3d0808cd76bff36aee1d8e6b75476cd1edc07f9edb6
TLSH
T18751E0F787E4867E891196F0AB14AE2FCE2D0516432C3C56C9E4AE1B93F3471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

ad81dbe6-8614-42a7-98f2-a8e155915281.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ad81dbe6-8614-42a7-98f2-a8e155915281.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4d60a38b3dc2df05c54c851a567fa6ad5d52e2193f608cfc569c71557d76e04a
MD5 13238fe2e40ab3bb1b9091a92d4a9cb9
SHA1 be9387495dfc9f7249d74a34bbd0f738414569bf
SHA512 28d83a802bc15a30d6b7de6a030e8c2938dc88e1c2db29afc8b8211e35278884735cea7261a4b624d9d5ced420f3de14dd8eadb5c733aada87905e32b83cc364
SSDEEP 192:sxRMgXRKb0/f2spqmBqzoA8p4B/g6+WNIYd6r0Y7GWhQcIgIJ:sxRMgX+0/f2spHBnI/5IpBs
TLSH
T18E329715AE68A93B9CCBD20DFB657F53D2F95032A1951E44B6FC8A1C04EA6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0dcbaf716dc75be7152eb548c6ed14a0196203a846aded8dbeff452a5713fc99
MD5 84e4b315b4b11e053e1a17d94e8c46b8
SHA1 45f6fd936d4f5bd1e428d0bab3e63c4f1eefb321
SHA512 84720b74d8fe6f918b9ec22c9af3dede1a541a7290e9b6f0973b139fe605b64a818166f246f26ae8aa83a3427489f631334b2d2abd2b44385e56bc24334a7d7d
SSDEEP 96:KAFqKes49+JtzXjAX/0T1VAKNV1rA5FVELdN+pmKCchG:Qj9+JtzXjQ/0JVRV1roFVELdNxR
TLSH
T14E91DF15327A12C0397E350981BA9B5F424379A77128EF2B7BA880E6DF27E140CFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

bd8f5380-be8b-415b-957b-bb92c315ef0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd8f5380-be8b-415b-957b-bb92c315ef0f.tmp
Size 11KB
SHA256 72b2e719f9fdbddd78da82f7f87716aac6e772f73b3db45a47f857ae6d9974ba
MD5 306eaa3db20c29ec1c5a1b0d38444712
SHA1 907bab9882b75039cb82fa4780b7a04f4aca530f
SHA512 5cc062e68c7eab45b636bd7d86fab8e21b805271c88e0e723346853fb60d1bc47e90d0db8505a9fc742dec4bf2c27ce423288dc8eb059963e881748d79aacbda
SSDEEP 192:sxRMgcRKb0/f2sEqmBqzoA8p4B/g6+WNIYd6r0Y7GWhQcIgDSJ:sxRMgc+0/f2sEHBnI/5IpBi
TLSH
T19D329615AE68A93B9CCBD20DFB557F53E2F95032A1951F44B6FC8A1C04EA6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf3e4254-0c07-4e92-b895-d8e09bf1e448.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf3e4254-0c07-4e92-b895-d8e09bf1e448.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f51c45d7-1cc2-4208-b7c3-8ed9c198ab3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f51c45d7-1cc2-4208-b7c3-8ed9c198ab3a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0fff4fc-fb76-4372-8032-0bb777993403.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a0fff4fc-fb76-4372-8032-0bb777993403.tmp
Size 36KB
SHA256 c6126038a979465f8527a40fac1a8b7ffb4eafbba200bd3f47a062a0a0db0f59
MD5 1ce8163ec5d688e6643e524e20d6078d
SHA1 b914da38dcaee1a460ce96e8ae863cba6efe57e5
SHA512 c621c3829ad9ac764073149db291b47491387ea92d2cb9c5d7f4afd4b2db8859471761f37599352ebd9f245e692c46184da42dd5c900f3f23a3fcec30596652f
SSDEEP 768:9Fd13nwg47K3OV4t34M1h3Yogkl5akl8pbHW0AWDDE75EhLW:p13f1h3Yog05akl4bHW0AKk+q
TLSH
T14EF29E72EC94DE7B9EE6D644B2193217FEF4916789D48A80D6CD9E0C01872ED034FD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb2b36e0-5e90-423a-9c3e-4b8e5786d57b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb2b36e0-5e90-423a-9c3e-4b8e5786d57b.tmp
Size 37KB
SHA256 b6a514bf6818197115361ca0dd26bcbd2b628483c72192b3a25082a70f9863ca
MD5 44fa8d75a539504a2d751f43a01c6532
SHA1 0dc412999ddb2f620b322d7b2f8194403e50a886
SHA512 27c92b4d00173567f2bf35faaca2232650b0990dcc1b8b87b4d5f2afe43ab16c1fc1f556ee0e03a68a76aa27395ec81574c32ce9ce72d1b609785b3280f13a9b
SSDEEP 768:B/UxvxjgC+CZ3EkK3OV4t3i1h3Yogkl5akl8pbHW0AWTLSHvP0Vv:UZj3+I3V1h3Yog05akl4bHW0AWSCv
TLSH
T19903CF3AEC65AE738DE6E244761AA317FFF894635AC4569445DCAF0E02873AD030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce914601-9534-4919-b1c0-8a60c7e6defa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce914601-9534-4919-b1c0-8a60c7e6defa.tmp
Size 33KB
SHA256 2a10c9e723199d8c5be0eff6f98844d64f904759a203f12c529b1850f9f94eb2
MD5 dc3db5d452826d8e57fc95fe763475a7
SHA1 1c56130d57ade76add621ad2fa66aa998825c421
SHA512 af2f5246a9dbbbf6463689eaa7ce53baee1ae69110de5c92fb89e62eb8f03951a59e9c74310f65be663614346715b5ae8977f71e26fde2c17fd6edfc4d8e68be
SSDEEP 768:gm3C7K3OV4t34V1h3Yogkl5akl8pbHW0AWDDE75EhLW:gm3Y1h3Yog05akl4bHW0AKk+q
TLSH
T1B9F2AF70ECA59E774EE2E244B21A3257BEF4D5279AD84A84D4CD9F0D01876AE034FD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7a905d2-13c2-4413-b297-0fad0edbae92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f7a905d2-13c2-4413-b297-0fad0edbae92.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download